Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/YYtXBXzhm07IKZW-DEv-Ky14gEU.roa
File: YYtXBXzhm07IKZW-DEv-Ky14gEU.roa (raw, json)
Hash identifier: MKcRsUYdNXtph8/I/q364RIuY90DTh8jhVI19kyOkbQ=
Subject key identifier: 61:8B:57:05:7C:E1:9B:4E:C8:29:95:BE:0C:4B:FE:2B:2D:78:80:45
Certificate issuer: /CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Certificate serial: 0184E1611B8D74749BD47A3765855BECDAA3
Authority key identifier: 3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/YYtXBXzhm07IKZW-DEv-Ky14gEU.roa
Signing time: Mon 05 Dec 2022 08:22:28 +0000
ROA not before: Mon 05 Dec 2022 08:22:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211440
IP address blocks: 139.28.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:61:1b:8d:74:74:9b:d4:7a:37:65:85:5b:ec:da:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Validity
Not Before: Dec 5 08:22:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=618b57057ce19b4ec82995be0c4bfe2b2d788045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ab:1b:6a:12:91:d5:4e:8d:b4:26:5d:bc:7c:
25:e8:5d:05:90:82:7a:1c:0f:e3:8c:cc:7e:84:31:
88:73:78:52:18:97:e3:da:87:92:d5:da:ce:d6:da:
e7:8f:8f:0f:25:fb:b1:22:67:4c:a4:11:c2:09:ef:
07:33:98:d2:c8:fb:f7:e5:2d:07:34:f6:65:ca:9f:
38:83:e9:00:86:42:ac:8b:8e:02:1b:43:bf:2b:69:
18:bc:23:06:24:99:b3:95:a7:90:b3:00:70:46:cf:
cc:a7:07:c9:65:ce:f7:4d:82:0d:a4:00:df:d3:80:
1c:c8:5f:d7:02:91:af:0c:0c:47:7e:3d:30:d7:b2:
de:ca:ca:7d:7e:0d:22:13:10:65:47:83:98:41:df:
9a:90:a4:7b:6a:4b:66:88:4e:56:d0:44:53:dd:ce:
6e:04:c8:77:f0:21:ec:12:92:94:23:78:34:b6:70:
db:5b:0f:42:fd:bd:01:b6:e4:c3:47:dc:86:4b:6e:
7e:2e:7b:82:3a:a8:ee:26:3f:4e:61:7d:ef:0a:93:
7a:66:8a:df:f3:25:73:82:7f:41:49:07:19:d1:4d:
54:86:49:49:8f:01:cb:b4:fa:6a:bd:4d:b5:f3:e5:
ba:c1:9c:76:3c:b9:f6:75:ed:77:be:54:21:1f:5f:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8B:57:05:7C:E1:9B:4E:C8:29:95:BE:0C:4B:FE:2B:2D:78:80:45
X509v3 Authority Key Identifier:
keyid:3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/YYtXBXzhm07IKZW-DEv-Ky14gEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a1:08:29:3b:c8:3a:c4:1b:61:10:6d:66:7e:71:18:6d:58:
c3:3b:ab:80:2c:b2:bd:03:61:f8:e6:6d:df:ca:0d:5a:8b:fa:
40:44:ad:d7:eb:cd:87:80:12:3c:63:d0:09:2a:e4:0d:aa:5e:
05:c0:9a:39:c9:8e:69:7a:e6:32:88:fe:35:78:4d:74:02:ef:
49:39:04:65:37:bc:09:95:66:19:c6:c9:cb:e9:02:d1:43:08:
29:60:22:9e:19:3a:db:17:de:8d:42:4f:2c:e8:3a:3b:2f:85:
29:40:5a:b0:34:1c:a2:cf:a8:6e:22:fa:52:9c:0a:f3:4e:c1:
59:71:38:0f:63:12:4e:9a:c6:0d:8f:6a:71:63:90:34:7e:9b:
05:ed:e2:98:7a:82:a7:09:7c:c6:6b:a9:48:6f:48:f9:ef:51:
63:96:13:a6:66:e8:40:2b:78:24:f3:4e:76:75:2a:d3:3a:49:
f2:1d:dc:eb:73:3f:91:10:fc:4f:be:3e:8b:81:8c:e5:e1:0e:
78:88:ae:8a:62:01:0a:0d:5a:2d:bf:2f:18:55:f8:42:23:7c:
f1:c7:9a:cd:21:67:a0:7b:e4:34:a4:04:fa:b0:ee:4c:d2:eb:
1a:89:d8:30:92:50:27:f3:69:c4:a6:10:4d:fa:d2:f9:f2:f5:
82:e7:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:20 2025 by rpki-client